CVSROOT: /cvs Module name: src Changes by: [email protected] 2011/04/18 03:54:41
Modified files:
sbin/iked : ikev2.c policy.c
Log message:
Improve the iked acquire mode peer <-> policy matching. This change
picks the peer from the acquire message and allows to match masked
peers in the policies like "peer any" or "peer 10.0.0.0/8" instead of
requiring exactly matching peer specifications.
ok mikeb@
